This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft File: VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json) Hash identifier: l6/sK3O/pOKumDtfNktvbBF9Hl4iUGfxob+VBu0EPgc= Subject key identifier: AF:56:AB:60:CA:00:C8:79:BB:0E:A5:AA:94:48:BD:11:CE:3D:A1:61 Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 Certificate issuer: /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Certificate serial: 019B0F6E5BD30E03A101BD9704002F84002B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 22:00:49 +0000 Manifest this update: Thu 11 Dec 2025 22:00:49 +0000 Manifest next update: Fri 12 Dec 2025 22:00:49 +0000 Files and hashes: 1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=) 2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: CBtSzBO65kH4JZzM/FOBwcw028+17XP4VXrmmixUBGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:5b:d3:0e:03:a1:01:bd:97:04:00:2f:84:00:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Validity Not Before: Dec 11 22:00:49 2025 GMT Not After : Dec 12 22:00:49 2025 GMT Subject: CN=af56ab60ca00c879bb0ea5aa9448bd11ce3da161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:aa:b7:40:df:6b:c3:60:f2:2f:cc:33:2f: ee:91:bf:c9:1f:f2:12:82:54:0f:23:e8:a3:82:43: 14:11:b4:ee:23:8d:70:ae:ab:c9:e9:85:ab:72:69: c5:d9:25:cf:bf:f5:17:17:1a:f3:44:43:dd:42:8a: fd:3c:9e:d3:5b:17:2c:84:7d:fc:86:81:6c:74:a4: a2:f7:fe:f1:18:40:d7:b9:53:da:ed:ff:fc:30:90: e7:8a:fc:39:52:23:87:00:ce:58:9f:4a:4e:93:fb: 8a:f2:0c:47:3c:84:9d:47:0d:42:70:58:d0:74:a8: a0:12:c5:1a:8a:37:34:49:36:58:9f:9e:2c:57:6b: 0d:83:c8:31:e3:f8:d8:56:5d:82:e1:2d:dd:b7:51: 5a:cb:9d:c6:04:9f:76:1a:e4:38:bc:df:17:86:f8: 51:ea:c5:74:6f:ee:74:95:d7:5e:55:fb:67:32:6a: 99:39:39:9f:87:3a:c0:b3:8c:de:e3:cf:15:dc:81: 39:bb:2b:26:9f:81:ab:7e:6b:85:f3:a9:d1:d4:ba: a9:86:4c:34:af:2c:ad:69:a5:89:b6:f9:33:f7:65: e0:9d:dc:2a:33:29:55:91:a3:0e:6e:d8:92:f2:65: 6a:07:6c:fb:e6:de:de:8d:c7:16:73:2b:cf:4c:7e: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:AB:60:CA:00:C8:79:BB:0E:A5:AA:94:48:BD:11:CE:3D:A1:61 X509v3 Authority Key Identifier: keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:af:c1:09:93:7a:4c:2c:f9:47:86:90:12:d5:d4:dd:df:0d: de:80:aa:bd:1c:95:1b:a0:06:ae:33:69:73:c8:69:d5:95:dc: 3e:79:b6:45:a4:20:26:ad:34:c9:21:f2:79:aa:07:2c:8d:f7: eb:9e:6e:a2:10:dd:58:9a:3b:e8:09:a1:66:05:53:d3:78:c6: 03:45:23:a4:98:24:82:0e:73:a1:bb:87:a3:74:bb:b4:86:71: af:e0:0c:8f:b6:a1:c8:06:22:14:ec:41:4c:b8:58:03:ec:43: 5d:01:ed:ff:8f:b6:2e:97:a5:12:9c:b7:6f:65:0d:e7:16:8c: 73:e4:5e:8b:87:81:05:fb:71:57:12:a8:9d:e9:e8:22:9c:65: d2:d2:b1:87:1b:ac:d1:f2:0f:54:f2:33:0c:9f:c5:03:7e:95: 10:ff:db:bc:07:16:24:36:b5:c7:31:d0:d4:81:e3:3d:8b:32: 60:8d:1c:b4:df:75:26:d1:19:7f:17:d1:bd:43:9f:f3:2f:8b: 82:53:14:ae:3d:dd:24:45:34:32:9f:47:f3:92:0d:75:ef:7a: 75:b4:7b:d6:de:12:eb:08:15:0a:2a:cd:64:00:72:ad:95:88: aa:b6:7a:11:6e:20:7b:cf:6d:fe:9f:b3:71:19:f8:fc:32:97: 4b:5c:fc:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPblvTDgOhAb2XBAAvhAArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjRiZmNkMDE2NGFkN2M2Njg4YWYyMjI0NmM4MmUxOTk1 ZGQzNTEwHhcNMjUxMjExMjIwMDQ5WhcNMjUxMjEyMjIwMDQ5WjAzMTEwLwYDVQQD EyhhZjU2YWI2MGNhMDBjODc5YmIwZWE1YWE5NDQ4YmQxMWNlM2RhMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGqt0Dfa8Ng8i/MMy/ukb/JH/IS glQPI+ijgkMUEbTuI41wrqvJ6YWrcmnF2SXPv/UXFxrzREPdQor9PJ7TWxcshH38 hoFsdKSi9/7xGEDXuVPa7f/8MJDnivw5UiOHAM5Yn0pOk/uK8gxHPISdRw1CcFjQ dKigEsUaijc0STZYn54sV2sNg8gx4/jYVl2C4S3dt1Fay53GBJ92GuQ4vN8XhvhR 6sV0b+50lddeVftnMmqZOTmfhzrAs4ze488V3IE5uysmn4GrfmuF86nR1Lqphkw0 ryytaaWJtvkz92XgndwqMylVkaMObtiS8mVqB2z75t7ejccWcyvPTH4U2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9Wq2DKAMh5uw6lqpRIvRHOPaFhMB8GA1UdIwQY MBaAFFa0v80BZK18ZoivIiRsguGZXdNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQt MjQxNjY1ZjQ5ZDI1LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQtMjQxNjY1ZjQ5ZDI1 LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6/BCZN6 TCz5R4aQEtXU3d8N3oCqvRyVG6AGrjNpc8hp1ZXcPnm2RaQgJq00ySHyeaoHLI33 655uohDdWJo76AmhZgVT03jGA0UjpJgkgg5zobuHo3S7tIZxr+AMj7ahyAYiFOxB TLhYA+xDXQHt/4+2LpelEpy3b2UN5xaMc+Rei4eBBftxVxKonenoIpxl0tKxhxus 0fIPVPIzDJ/FA36VEP/bvAcWJDa1xzHQ1IHjPYsyYI0ctN91JtEZfxfRvUOf8y+L glMUrj3dJEU0Mp9H85INde96dbR71t4S6wgVCirNZAByrZWIqrZ6EW4ge89t/p+z cRn4/DKXS1z8wQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:26 2025 by rpki-client